Cat JansenGrand Rapids, MI
Theme
Back to Insights
Leadership

What Five Years of Running a Security Company Taught Me

July 4, 2026

Six lessons from carrying the risk personally — on revenue, cash flow, governance, and the capital that compounds without management.

I built and ran a multi-division security services company for five years. For most of that time I was also its head of sales, its operations lead, and whatever else the day required. Nobody handed me a manual.

What follows isn't a list of wins. It's the set of lessons I carry now — each one learned the hard way, and each one the kind of thing that doesn't show up in a certification.

Revenue is hunted, not found.

I was the company's entire sales force for most of its life. A good service doesn't sell itself; growth came from a pipeline I built one call at a time, one relationship at a time. There were quarters where the only thing between payroll and a shortfall was the next conversation I hadn't had yet.

That shaped how I think about revenue: it's hunted, not found. Go-to-market discipline isn't a function you delegate early — it's the thing that determines whether there's anything to operate at all.

Cash flow is the real risk register.

Clients pay in 30 to 60 days. Officers get paid every week. That gap is where most service companies quietly bleed out, and it's where I learned to read a contract as a cash-flow instrument before reading it as a revenue one.

I started modeling working capital per engagement before signing — what it would cost to staff in week one, when the first check would actually clear, and how long I'd be carrying the load alone. Financial risk doesn't live in the P&L statement; it lives in the timing.

The contract you almost decline can be the one that carries you.

Some of the most important work I've done came from opportunities that didn't fit the plan on paper. A harder site, a tighter margin, a scope nobody else wanted — the kind of thing you'd be forgiven for passing on.

I learned to evaluate a deal on where it leads, not just what it pays: what capability it builds, what reference it earns, what relationship it opens. The contracts that looked smallest in the moment were often the ones that reshaped what the company could do next.

Documentation is the actual security posture.

The things that protected my company were never tactical. They were handbooks, agreements, post orders, training records, and incident reports — the unglamorous paperwork I built before I needed it, not after.

I learned this the way everyone learns it: by needing a document I didn't have, at the moment I needed it most. Governance isn't theater. Done right, it's the layer that turns a liability into a defensible position — and it has to exist before the incident, not in response to it.

You don't beat scale on price — you beat it on things scale can't do.

National firms can always underbid a regional operator. They have the overhead spread, the buying power, the brand. I spent some time trying to compete on their number before I understood the game.

What I won on was everything their size makes hard: responsiveness, site knowledge, supervision density, the ability to move on a request in the same week. Differentiation isn't a slogan. It's the specific, defensible thing you do that the larger player structurally can't.

In a small industry, character is compounding capital.

Clients talk. Officers talk. Competitors talk. In a regional market, reputation moves faster than marketing ever will, and how you exit something matters as much as how you win it.

The relationships I kept through hard decisions — the contract I returned cleanly, the client I handled honestly when it cost me — became the foundation of everything that came after. Integrity isn't a value statement. It's the only capital that compounds without management.

None of these lessons came from a course or a credential. They came from carrying the risk personally — from being the person whose name was on the contract, the payroll, and the problem at 2 a.m.

That's the perspective I bring to every security program I touch now. If that's the kind of operator you're looking for, I'd welcome the conversation.